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Inventory and Analysis of WHOIS Registration Objects 
Abstract 


WHOIS output objects from registries, including both Regional 
Internet Registries (RIRs) and Domain Name Registries (DNRs), were 
collected and analyzed. This document describes the process and 
results of the statistical analysis of existing WHOIS information. 
The purpose of this document is to build an object inventory to 
facilitate discussions of data objects included in Registration Data 
Access Protocol (RDAP) responses. 


Status of This Memo 


This document is not an Internet Standards Track specification; it is 
published for informational purposes. 


This document is a product of the Internet Engineering Task Force 


(IETF). It represents the consensus of the IETF community. It has 
received public review and has been approved for publication by the 
Internet Engineering Steering Group (IESG). Not all documents 


approved by the IESG are a candidate for any level of Internet 
Standard; see Section 2 of RFC 5741. 


Information about the current status of this document, any errata, 


and how to provide feedback on it may be obtained at 
http://www.rfc-editor.org/info/rfc7485. 
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Iz 


Introduction 


Regional Internet Registries (RIRs) and Domain Name Registries (DNRs) 
have historically maintained a lookup service to permit public access 
to some portion of the registry database. Most registries offer the 
service via the WHOIS protocol [RFC3912], with additional services 
being offered via World Wide Web pages, bulk downloads, and other 
services, such as Routing Policy Specification Language (RPSL) 
[RFC2622]. 


Although the WHOIS protocol is widely adopted and supported, it has 
several shortcomings that limit its usefulness to the evolving needs 
of the Internet community. Specifically: 


o It has no query and response format. 


o It does not support user authentication or access control for 
differentiated access. 


o It has not been internationalized and thus does not consistently 
support Internationalized Domain Names (IDNs) as described in 
[RFC5890]. 


This document records an inventory of registry data objects to 
facilitate discussions of registration data objects. The 
Registration Data Access Protocol (RDAP) ([RFC7480], [RFC7482], 
[RFC7483], and [RFC7484]) was developed using this inventory as 
input. 


In the number space, there were altogether five RIRs. Although all 
RIRs provided information about IP addresses, Autonomous System 
Numbers (ASNs), and contacts, the data model used was different for 
each RIR. In the domain name space, there were over 200 country code 
Top-Level Domains (ccTLDs) and over 400 generic Top-Level Domains 
(gTLDs) when this document was published. Different Domain Name 
Registries may have different WHOIS response objects and formats. A 
common understanding of all these data formats was critical to 
construct a single data model for each object. 


This document describes the WHOIS data collection procedures and 
gives an inventory analysis of data objects based on the collected 
data from the five RIRs, 106 ccTLDs, and 18 gTLDs from DNRs. The RIR 
data objects are classified by the five RIRs into IP address, ASN, 
person or contact, and the organization that held the resource. 
According to SPECIFICATION 4 ("SPECIFICATION FOR REGISTRATION DATA 
PUBLICATION SERVICES") of the new gTLD applicant guidebook 
[ICANN.AGB-201206] and the Extensible Provisioning Protocol (EPP) 
([REC5730], [RFC5731], [RFC5732], and [RFC5733]), the DNR data 
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objects are classified by whether they relate to the domain, contact, 
nameserver, or registrar. Objects that do not belong to the 
categories above are viewed as privately specified objects. In this 
document, there is no intent to analyze all the query and response 
types that exist in RIRs and DNRs. The most common query objects are 
discussed, but other objects such as RPSL data structures used by 
Internet Routing Registries (IRRs) can be documented later if the 
community feels it is necessary. 


2. Terminology 
o Data element - The name of a specific response object. 
o Label - The name given to a particular data element; it may vary 


between registries. 


o Most popular label - The label that is most supported by the 


registries. 

o Number of labels - The number of different labels. 

o No. of TLDs - The number of registries that support a certain data 
element. 


3. Methodology 


WHOIS information, including port 43 response and web response data, 
was collected between July 9, 2012, and July 20, 2012, following the 
procedures described below. 


(1) First, find the RIR WHOIS servers of the five RIRs, which are 
AFRINIC, APNIC, ARIN, LACNIC, and RIPE NCC. All the RIRs 
provide information about IP addresses, ASNs, and contacts. 


(2) Query the corresponding IP addresses, ASNs, contacts, and 
organizations registered in the five RIRs. Then, make a 


comparative analysis of the response data. 


(3 Group together the data elements that have the same meaning but 
use different labels. 
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DNR object collection process: 


(1) A programming script was applied to collect port 43 response 
data from 294 ccTLDs. "nic.ccTLD" was used as the query string, 
which is usually registered in a domain registry. Responses for 
106 ccTLDs were received. 18 gTLDs' port 43 response data was 
collected from their contracts with ICANN. Thus, the sample 
size of port 43 WHOIS response data is 124 registries in total. 


(2) WHOIS data from the web was collected manually from the 124 
registries that send port 43 WHOIS responses. 


(3) Some of the response that which were collected by the program 
did not seem to be correct, so data for the top 10 ccTLD 
registries, like .de, .eu, and .uk, was re-verified by querying 
domain names other than "nic.ccTLD". 


(4) In accordance with SPECIFICATION 4 of the new gTLD applicant 
guidebook [ICANN.AGB-201206] and EPP ([RFC5730], [RFC5731], 
[RFC5732] and [RFC5733]), the response data objects are 
classified into public and other data objects. Public data 
objects are those that are defined in the above references. 
Other objects are those that are privately specified data 
elements or objects in different registries. 


(5) Data elements with the same meaning, but using different labels, 


were grouped together. The number of registries that support 
each data element is shown in the "No. of TLDs" column. 
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4. RIR Objects Analysis 
4.1. WHOIS Data for Organizations Holding a Resource 


Table 1 shows the organization objects of the five RIRs. 


4R-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| RIR | AFRINIC  |APNIC| ARIN |  LACNIC | RIPE NCC | 
| Objects | | | | | 
4+-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ * 
| Organization |organisation| NA | Name | Owner | org-name | 
| name | | | | | 
4R-------------- 4R------------ 4R----- 4R---------- 4----------- 4R------------ + 
| Organization | org-name | NA | Handle | owner-id |organisation| 
ID 
E rere ———— ME MEE : 
| Company | NA | NA | Company | NA | NA | 
4R-------------- 4R------------ 4----- 4R---------- 4----------- 4R------------ + 
| Name of | NA | NA | NA | responsible | NA | 
| person | | | | | | 
| responsible | | | | | | 
4+-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| Type of | org-type | NA | NA | NA | org-type | 
| organization | | | | | 
4R-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ * 
| Country | country | NA | country | country | country | 
4R-------------- 4R------------ 4R----- 4R---------- 4R----------- 4R------------ * 
Postal address NA address address address 
Address 
4R-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| City | NA | NA | city | NA | address 
4-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| State | NA | NA | StateProv| NA | address 
4R-------------- 4R------------ 4----- 4R---------- 4----------- 4R------------ + 
| Postal | NA | NA |PostalCode | NA | address 
| Code | | | | | | 
4R-------------- 4R------------ 4R----- 4R---------- 4----------- 4R------------ * 
| Phone | phone | NA | NA | phone | phone | 
4+-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| Fax Number | fax-no | NA | NA | NA | fax-no | 
4R-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
| ID of | admin-c | NA | Admin | owner-c | admin-c | 
ladministrative| | | poc | | | 
| contact | | | | | | 
4R-------------- 4R------------ 4----- 4R---------- 4R----------- 4R------------ + 
ID of tech-c NA Tech POC tech-c tech-c 
technical 
| contact | | | | | | 
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+-------------- + 
| Maintainer | 
| organization | 
AO + 
| Maintainer | 
| object | 
+-------------- + 
| Remarks | 
+-------------- + 
| Date of | 
| record 
| creation 
+-------------- + 
| Date of | 
| record | 
| changed 
ET SSA + 
| List of | 
| resources | 
+-------------- + 
| Source | 
+-------------- + 
| Reference | 
+-------------- + 
Table 1. 
Zhou, et al. 
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——————————— a 
mnt-ref | NA | NOC POC 
| | 
——————————— a 
mnt-by | NA | Abuse 
| | POC 
——————————— a 
remarks | NA | NA 
——————————— a 
Changed | NA | RegDate 
| | 
| | 
——————————— a 
changed | NA | Updated 
| | 
| | 
——————————— a 
NA | NA | NA 
| | 
——————————— a 
source | NA | NA 
——————————— a 
NA | NA | Ref 
——————————— a 


— + — + —— + —— + 


+ — + — + —— + ——— + 


list of 
resources 


+ — + — + —— + ——— + ——— + — + —— + —— + 


March 2015 
——————————— T 
mnt-ref 

| 
——————————— T 

mnt-by | 

| 
——————————— + 

remarks | 
——————————— + 

Changed 

| 

| 
——————————— + 

changed | 

| 

| 
——————————— + 

NA | 

| 
——————————— + 

source | 
——————————— + 

NA | 
——————————— + 
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4.2. WHOIS Data for Contacts 


Inventory of WHOIS Reg. Objects March 2015 
Table 2 shows the contact objects of the five RIRs. 
tS SS == ===5 $222 $222 === ==2=S==3= HS se 2352 4===252=*5 + 
| Data Element | AFRINIC | APNIC | ARIN | LACNIC | RIPE | 
| | | | | | Nc | 
4-------------- | $222 $ $222 HP + 
| Name | person | person | Name | person | person | 
4-------------- 4R--------- 4--------- 4R------------ 4--------- 4--------- * 
| | Company | NA | NA | Company | NA | NA | 
4-------------- 4--------- 4--------- 4R------------ 4--------- 4R--------- * 
| Postal | address | address | Address | address | address | 
| | Address | | | | | | 
qesecescscesccce ===> Ho === ==28===2= qdeeccessue de-—asccsc * 
| City | NA | NA | City | NA | address | 
ii Hass $222 do y==+ +22 + PR ici + 
| State | NA | NA | StateProv | NA | address | 
$ Ho $222 $ Ho 22222 $222 + 
| Postal Code | NA | NA | PostalCode | NA | address | 
AA $222 $222 ii ic HER + 
| Country | NA | country | Country | country | NA | 
4-------------- 4--------- 4R--------- 4R------------ 4--------- 4--------- * 
| Phone | phone | phone | Mobile | phone | phone | 
$ $222 Ho 2222 $ Ho 2222 Ho 2222 + 
| Fax Number | fax-no | fax-no | Fax | NA | fax-no | 
$ 4--------- 4--------- 4R------------ 4--------- 4--------- * 
| Email | e-mail | e-mail | Email | e-mail | NA | 
hea SA SPSS == $222 Ho $ ASES $222 + 
| ID | nic-hdl | nic-hdl | Handle | nic-hdl | nic-hdl | 
is === ====5= $222 $ RESTE PSSS Ho + 
| Remarks | remarks | remarks | Remarks | NA | remarks | 
$ $222 Ho $ Ho $222 + 
| Notify | notify | notify | NA | NA | notify | 
+= == == === Ho $222 $ pHini $222 + 
| ID of | mnt-by | mnt-by | NA | NA | mnt-by | 
| maintainer | | | | | | 
aii Ho do 2222 $ Ho 2222 $222 + 
| Registration | changed | NA | RegDate | created | changed | 
| Date | | | | | | 
toss asa $2 Ho 22222 $ D $2 + 
| Registration | changed | changed | Updated | changed | changed | 
| update | | | | | | 
a mete $222 $222 $ HS == 55 $222 + 
| Source | source | source | NA | NA | source | 
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4+-------------- 4+--------- 4+--------- 4+------------ 4+--------- +- 


Reference | NA | NA Ref NA 


4+-------------- 4+--------- 4+--------- 4+------------ 4+--------- +- 


Table 2. WHOIS Data for Contacts 
4.3. WHOIS Data for IP Addresses 


Table 4 shows the IP address objects of the five RIRs. 


-------- + 


NA 


-------- + 


Note: Due to the 72-character limit on line length, strings in some 
cells of the table are split into two or more parts, which are placed 
on separate lines within the same cell. A hyphen in the final 
position of a string indicates that the string has been split due to 


the length limit. 


4---------- 4---------- 4---------- * 
| Adminis- | | abuse-- | 
| trative | admin-c | mailbox | 
| contact | | | 
4---------- 4---------- 4---------- * 


Table 3. Example of String Splitting 


For instance, the original strings in the cells of Table 3 are 


"Administrative contact", "admin-c", and "abuse-mailbox", 
respectively. 
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=> potne E Haze S+H===+e=2+> === >= == SSeS + 
| Data | AFRINIC| APNIC | ARIN | LACNIC | RIPE NCC | 
| Element | | | | 
+—------------ Ho +---------- $ E ET E EA 4--------— $ + 
| IP | inetnum| inetnum | NetRange | NA | inetnum | 
| address | | | | | 
| range | | | | | 
4------------ Ho +---------- do Ho do + 
IPv6 inetónum| inetónum CIDR inetnum inet 6num 
address 
| range | | | | | 
Fretenni p= a um 2 2+> === 5 += === 22282 + 
Description | descr | descr | NetName | NA | descr | 
aa M N NUN. NIC | 
Remarks remarks| remarks NA NA remarks 
do 4-------- +---------- do Ho $ E E + 
| Origin AS | NA | NA | Originas |Originas| NA | 
| | | | | (future) | | 
4------------ Ho dovete $ E Ho $ r E NS + 
Network netname| netname NetHandle inetrev netname 
name/ID 
4------------ Ho == ====2== HRS == RE Soa Ses == RSS ER + 
| Maintainer | mnt-by | NA | NA | NA | mnt-by | 
| Object | | | | | | 
== GS E += Hee 2+== HS 52-522 oe += === 222282 + 
Maintainer mnt-- NA NA NA NA 
Sub- lower 
| assignments | | | | | | 
+------------ 4-------- SS ce do nsss dpeass Ho +------------- + 
| Adminis- | admin-c | admin-c | Orgld | ownerid| admin-c | 
| trative | | | | | 
| contact | | | | | 
=== ARS SS Ho +---------- $ === 252235 +------------- + 
| Parent | parent | NA | Parent | NA | NA | 
| range | | | | | 
T-22--————---- patenata deecEHI I DES === +22 sa +=+icares= + 
| Status | status | status | NetType | status | status | 
ci oat prennet T ESSE Hs == E HS SS hs ++ SS + 
|Registration| changed] NA | RegDate | created| changed | 
| Date | | | | | | 
ta ee Ho +---------- do I EE EN EE Ho $ E A TE + 
|Registration| changed| changea | Updated | changed | changed | 
| update | | | | | 
do 4--------— +---------- $ E Ho do E + 
| Reference | NA | NA | Ref | NA | NA 
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$ Ho HI + 
ID | org NA | 
organization 
holding the 
| resource | | | 
ii Ho $ + 
| Referral | NA | NA | 
| server | | | 
$ Ho $ + 
| Technical | tech-c | tech-c | 
| contact | | | 
$ Ho $ + 
Abuse | NA | NA | 
contact | | | 
$ Ho Ho + 
Referral NA NA 
technical 
| contact | | | 
$ Ho $ + 
| Referral | mnt-irt | mnt-irt | 
| abuse | | | 
| contact | | | 
$ Ho $ + 
Referral | NA NA | 
NOC | | 
| contact | | | 
$ Ho HI + 
Name NA NA 
server 
$ Ho Ho + 
Table 4. WHOIS 
4.4. WHOIS Data for ASNs 
4--—------------ 4--------- Ho 
| Data | AFRINIC | APNIC 
| Element | | 
occi 4--------- Ho 
ID aut-num aut-num 
$ ii pes tapas 
| Description | descr | descr 
(iaa re ee 
Organization org NA 
Zhou, et al. Info 
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Siete +=> Hato +52 >=+ 

Orgld owner lorganisation | 

| | | 

oS Se E +--------+-------------+ 

ReferralServer | NA | NA | 

| | | 

ii +--------+-------------+ 

OrgTechHandle | tech-c | tech-c | 

| | | 

part e => id 

OrgAbuseHandle| abuse-c|abuse-mailbox | 

| 

=== n ===35=52= +--------+-------------+ 
RTechHandle NA NA 

| | | 

Sap a RR EE +--------+-------------+ 

RAbuseHandle | NA | NA | 

| | | 

| | | 

SS => FORA + SS 

RNOCHandle NA | NA | 

| | 

| | | 

Se6s5355S5855>- a 
NA nserver NA 

e ATA +--------+-------------+ 

Data for IP Addresses 

Shia 7 OS dames t 

| ARIN | LACNIC | RIPE NCC | 

| | | | 

m ta SSS Ho == + 

ASNumber aut-num aut-num 

——------------- Ho Ho + 

| NA | NA | descr | 

| | | | 

A Ho +---------- + 
Orgld owner org 
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$ $222 HZ $ Ho HI + 
| Comment | remarks | NA | Comment | NA | remarks | 
4-------------- 4--------- 4R---------- 4R------------- 4--------- 4R---------- * 
|Administrative| admin-c | admin-c | ASHandle  |owner-id | admin-c | 
| contact ID | | | | | 
$ ii E ii OS $ $2 $ + 
| Technical | tech-c | tech-c |OrgTechHandle | rout ing-c | tech-c | 
| contact ID | | | | | | 
$ ES ds $ === ==35= $ + 
| Organization | NA | nic-hdl | NA | owner-c | organi- | 
| ID | | | | | sation | 
$ $222 HO $ 4--------- 4---------- * 
| Notify | notify | notify | NA | NA | NA | 
$ $222 HI $ Ho 22222 do + 
| Abuse | NA | NA | OrgAbuse | abuse-c | NA 
| contact | | | Handle | | | 
$ toss SSS s— inicie $ $222 $ + 
| Maintainer | mnt-by | mnt-by | NA | NA | mnt-by | 
| Object | | | | | 
4--—------------ === HS SS => $ Ho 2222 == + 
| Maintainer [mnt-lower| mnt-lower | NA | NA [mnt-lower | 

Sub- | 

assignments 
4-------------- 4--------- 4---------- 4------------- 4--------- 4---------- * 
| Maintainer | NA | NA | NA | NA | mnt-ref | 
| Organization | | | | | | 
$ $222 $2 $ 4--------- 4---------- * 
Registration changed NA RegDate created NA 

Date 
4R-------------- 4--------- 4R---------- 4------------- 4--------- 4R---------- * 
[Registration | changed | changed | Updated | changed | NA | 
| update | | | | | | 
4-------------- RSS RSS aci is $ $222 do + 
| Source | source | source | NA | NA | source | 
$ $222 $ $ Ho 222 do + 
Table 5. WHOIS Data for ASNs 

4.5. Conclusion 


As can be observed, some data elements were not supported by all 
RIRs, and some were given different labels by different RIRs. Also, 
there were identical labels used for different data elements by 
different RIRs. In order to construct a single data model for each 
object, a selection of the most common and useful fields was made. 
That initial selection was the starting point for [RFC7483]. 
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5. DNR Object Analysis 
5.1. Overview 


WHOIS data was collected from 124 registries, including 106 ccTLDs 
and 18 gTLDs. All 124 registries support domain queries. Among 124 
registries, eight ccTLDs and 15 gTLDs support queries for specific 
contact persons or roles. 10 ccTLDs and 18 gTLDs support queries by 
nameserver. Four ccTLDs and 18 gTLDs support registrar queries. 
Domain WHOIS data contain 68 data elements that use a total of 550 
labels. There is a total of 392 other objects for domain WHOIS data. 


5.2. Public Objects 


As mentioned above, public objects are those data elements selected 
according to the new gTLD applicant guidebook and EPP. They are 
generally classified into four categories by whether they are related 
to the domain, contact, nameserver, or registrar. 
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5.2.1. WHOIS Data for Domains 


WHOIS replies about domains include "Domain Name", "Creation Date", 
"Domain Status", "Expiration Date", "Updated Date", "Domain ID", 


"DNSSEC", and "Last Transferred Date". Table 6 gives the element 
name, most popular label, and the corresponding numbers of TLDs and 
labels. 

4------------------- == 2 ===25===+5=====5 $ $ + 
| Data Element | Most Popular | No. of | No. of | 
| | Label | TLDs | Labels | 
$ AO A $ $ + 
| Domain Name | Domain Name | 118 | 6 

$ e 4------------------- 4R------------ 4-------------- * 
| Creation Date | Created | 106 | 24 

AO aore AO A $ $ + 
| Domain Status | Status | 95 | 8 

hese == == ennn $ ig ac ah aaa iar $ $ + 
| Expiration Date | Expiration Date | 81 | 21 

tease SsoSesesssss SoS FASS SSS Ss SSS SSS == $ a is E + 
| Updated Date | Modified | 70 | 20 | 
aco RSS SAR a ts dol a $ + 
| Domain ID | Domain ID | 34 | 5 

AO A A AO $ $ + 
| DNSSEC | DNSSEC | 14 | 4 | 
AO D prsna mnnn $ $ + 
| Last Transferred | Last Transferred | 4 | 3 

| Date | Date | | | 
4------------------- HS == ar S= 535 $ $ + 


Table 6. WHOIS Data for Domains 
Several statistical conclusions obtained from above data are: 
o 95.16% of the 124 registries support a "Domain Name" data element. 


o 85.48% of the 124 registries support a "Creation Date" data 
element. 


o 76.61% of the 124 registries support a "Domain Status" data 
element. 


o On the other hand, some elements such as "DNSSEC" and "Last 


Transferred Date" are only supported by 11.29% and 3.23% of the 
registries, respectively. 
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5.2.2. WHOIS Data for Contacts 
In the domain name space, contacts are typically divided into 
registrant, administrative contact, technical contact, and billing 
contact. 


5.2.2.1. Registrant 


Table 7 shows all the contact information for a registrant. 14 data 
elements are listed below. 


AZ A E R-—------------------- Ho $ + 
| Data Element | Most Popular Label | No. of | No. of | 
| | | TLDs | Labels | 
4R-—------------------- 4R-—-------------------- $ === $ + 
| Registrant Name | Name | 65 | 7 
is AF R-—------------------- Ho $ + 
| Registrant Email | Registrant Email | 59 | 7 
$ A i E AEAT Ho $ == + 
| Registrant ID | Registrant ID | 50 | 12 
ee A ee $ EE ANE $22 $ == + 
| Registrant Phone | Registrant Phone | 48 | 6 
AO S $ O $22 do + 
| Registrant Fax | Registrant Fax | 44 | 6 
$ A $ O Ho $ + 
| Registrant | Registrant | 42 | 4 
| Organization | Organization | | 
E A RA AZ O $222 $ + 
| Registrant Country | Country | 42 | 6 
| Code | | | | 
$ enese A Ho $ + 
| Registrant City | Registrant City | 38 | 4 
$ R-—------------------- Ho +------------ + 

Registrant Postal Registrant Postal 37 5 

Code Code 

$ $ R E O $22 do + 
| Registrant | Registrant | 32 | 4 
| State/Province | State/Province | | 
$ $ O Ho $ + 
| Registrant Street | Registrant Streetl | 31 | 16 
AZ EA $ AE EATA Ho +------------ + 
| Registrant Country | Registrant Country | 19 | 4 | 
fe a ae ii A O Ho $ + 
| Registrant Phone | Registrant Phone | 18 | 2 


| Ext. Ext. 
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4-------------------- 4--------------------- 4----------- 4------------ * 
| Registrant Fax Ext | Registrant Fax Ext 17 2 
4-------------------- 4--------------------- 4----------- 4------------ * 


Table 7. Registrant 


Among all the data elements, only "Registrant Name" is supported by 
more than one half of registries. Those supported by more than one 
third of registries are: "Registrant Name", "Registrant Email", 
"Registrant ID", "Registrant Phone", "Registrant Fax", "Registrant 
Organization", and "Registrant Country Code". 
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5.2.2.2. Admin Contact 


Table 8 shows all the contact information for an administrative 
contact. 14 data elements are listed below. 


4R-------------------- 4R-------------------- 4R----------- 4R------------- + 
| Data Element | Most Popular Label | No. of | No. of | 
| | | TLDs | Labels | 
4-------------------- 4R-----------2--2------- 4R----------- 4R------------- * 
| Admin Street | Address | 64 | 19 
4+-------------------- 4+-------------------- 4+----------- 4+------------- + 
| Admin Name | Admin Name | 60 | 9 
4+-------------------- 4+-------------------- 4+----------- 4+------------- + 
| Admin Email | Admin Email | 54 | 12 
4+-------------------- 4+-------------------- 4+----------- 4------------- + 
| Admin ID | Admin ID | 52 | 16 | 
+-------------------- +-------------------- 4+----------- 4------------- + 
| Admin Fax | Admin Fax | 44 | 8 
4-------------------- 4-------------------- 4+----------- 4+------------- + 
| Admin Phone | Admin Phone | 43 | 9 
4-------------------- 4R-------------------- 4R----------- R------------- * 
| Admin Organization | Admin Organization | 42 | 9 
+-------------------- +-------------------- 4+----------- 4------------- + 
| Admin Country Code | Country | 42 | 7 
+-------------------- +-------------------- 4+----------- +------------- + 
| Admin City | Admin City | 35 | 5 | 
+-------------------- +-------------------- 4+----------- 4+------------- + 
| Admin Postal Code | Admin Postal Code | 35 | 7 
4+-------------------- 4+-------------------- 4+----------- 4+------------- + 
| Admin | Admin | 28 | 5 

| State/Province | State/Province | | 
+-------------------- +-------------------- 4+----------- 4------------- + 
| Admin Country | Admin Country | 17 | 5 
4R--------2------------ 4R-------------------- 4R----------- 4R------------- * 
| Admin Phone Ext. | Admin Phone Ext. | 17 | 3 
4+-------------------- 4+-------------------- 4+----------- 4------------- + 
| Admin Fax Ext. | Admin Fax Ext. | 17 | 3 
4+-------------------- 4+-------------------- 4+----------- 4+------------- + 


Table 8. Admin Contact 


Among all the data elements, only "Admin Street" is supported by more 
than one half of registries. Those supported by more than one third 
of registries are: "Admin Street", "Admin Name", "Admin Email", 
"Admin ID", "Admin Fax", "Admin Phone", "Admin Organization", and 
"Admin Country Code". 
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5.2.2.3. Tech Contact 


Table 9 shows all the information for a domain name technical 
contact. 14 data elements are listed below. 


R-—------------------ AZ ET FAAEE $22 $2 + 
| Data Element | Most Popular Label | No. of | No. of | 
| | | TLDs | Labels | 
$ AZ $ $ + 
| Tech Email | Tech Email | 59 | 9 
E E aa EE E A $222 $2 + 
| Tech ID | Tech ID | 55 | 16 | 
4R-—------------------ $ ------------ Ho $ + 
| Tech Name | Tech Name | 47 | 6 
$ ------------ 4R-------------------- R----------- R-—----------- * 
| Tech Fax | Tech Fax | 45 | 9 
$ CET A E ANE ENES SE S $22 R-—----------- * 
| Tech Phone | Tech Phone | 45 | 10 
AZ TA AO Ho $ + 
| Tech Country Code | Country | 43 | 9 
$ e E $ A E E Ho R-—----------- * 
| Tech Organization | Tech Organization | 39 | 7 | 
R-—------------------ 4R-—------------------- R-—--------- R------------- * 
| Tech City | Tech City | 36 | 4 
AZ SAHE AZ a a $22 $ + 
| Tech Postal Code | Tech Postal Code | 36 | 7 
ii A $ a A Ho A + 
Tech Tech 30 4 
State/Province State/Province 
$ S A A a EE +-------------— + 
| Tech Street | Tech Street1 | 27 | 16 
AO S EENE AZ $222 $2 + 
| Tech Country | Tech Country | 18 | 5 
$ A AZ E EA Ho R-—----------- * 
| Tech Fax Ext | Tech Fax Ext | 18 | 3 
AZ E A $ A Ho R-—----------- * 
| Tech Phone Ext | Tech Phone Ext. | 13 | 3 
$ R-—------------------ Ho $2 + 


Table 9. Tech Contact 


Among all the data elements, there are no elements supported by more 
than one half of registries. Those supported by more than one third 
of registries are: "Tech Email", "Tech ID", "Tech Name", "Tech Fax", 
"Tech Phone", and "Tech Country Code". 
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5.2.3. WHOIS Data for Nameservers 


114 registries (about 92% of the 124 registries) have the 
"nameserver" data element in their WHOIS responses. However, there 
are 63 different labels for this element, as shown in Table 11. The 
top three labels for this element are "Name Server" (which is 
supported by 25$ of the registries), "Name Servers" (which is 
supported by 16$ of the registries), and "nserver" (which is 
supported by 12$ of the registries). 


Table 11. WHOIS Data for Nameservers 
Some registries have nameserver elements such like "nameserver 1", 
"nameserver 2" till "nameserver n". Thus, there are more labels than 
of other data elements. 


5.2.4. WHOIS Data for Registrars 


There are three data elements about registrar information. 


4------------------- 4--------------------- 4----------- 4------------- t 

Data Element Most Popular Label No. of No. of 
TLDs Labels 

4------------------- 4--------------------- 4----------- 4------------- t 

| Sponsoring | Registrar | 84 | 6 

| Registrar | | | | 

4------------------- 4--------------------- 4----------- 4------------- t 
Created by Created by 14 3 
Registrar 

4------------------- 4--------------------- 4----------- 4------------- + 

| Updated by | Last Updated by | 11 | 3 

| Registrar | Registrar | | 

4------------------- 4--------------------- 4----------- 4------------- + 


Table 12. WHOIS Data for Registrars 
67.7% of the registries have the "Sponsoring Registrar" data element. 


The elements "Created by Registrar" and "Updated by Registrar" are 
supported by 11.3$ and 8.9$ of the registries, respectively. 
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5.3. Other Objects 


So-called "other objects" are those data elements that are privately 
specified or are difficult to be classified. There are 392 other 
objects altogether. Table 13 lists the top 50 other objects found 
during data collection. 


AZ O O I T $2 + 
| Data Element | No. of TLDs | 
AZ O O a R------------- * 
| Registrant | 41 | 
toes assesses A seo ha==22== 223 + 
| Phone | 32 | 
Mc See ee See ee eee eee Se $ + 
| Technical contact | 26 | 
hess sae ase nee Soe Sepa SAS ii + 
| Administrative contact | 15 | 
AZ E A R A ERE O D AAE $ + 
| source | 14 | 
AZ O O O E E $ + 
| fax-no | 13 | 
AZ O O a a TN R------------- * 
| nic-hdl | 13 | 
A O $ + 
| Billing Contact | 12 | 
AZ O O E T $2 + 
| referral url | 11 | 
A O O A R-—----------- * 
| e-mail | 10 | 
A O A T E R------------- * 
| WHOIS server | 9 | 
eee ee pe Tes ee ee eS R-—----------- * 
| Admin Contact | 9 | 
A O C A E A R-—----------- * 
| Type | 9 | 
AZ O O $ + 
| Website | 9 | 
MIEL a EE proc eue o * 
| zone-c | 8 | 
lg ae eae ee ee pe ee ee Se I Penn hea dere + 
| remarks | 7 | 
Pe SSS SS 5 SSS Ss SSS SS SS SS eS SSS R-—----------- * 
| Registration URL | 6 | 
AZ = $2 + 
| anonymous | 6 | 
AZ O O O R-—----------- * 
| anniversary | 6 | 
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HO 4------------- * 
| Keys | 2 | 
HOZ 4------------- * 
| Language | 2 | 
HO 4------------- + 
| NIC handle | 2 | 
HO 4------------- * 
| Record maintained by | 2 | 
HO 4------------- + 
| Registration Service Provider | 2 | 
HOZ 4------------- * 
| Registration Service Provided By | 2 | 
4---------------------------------------- 4------------- * 
| Registrar URL (registration services) | 2 | 
HOZ 4------------- * 


Table 13. The Top 50 Other Objects 


Some registries returned things that looked like labels, but were 
not. For example, in this reply: 


Registrant: 
Name: 
Email: 


"Name" and "Email" appeared to be data elements, but "Registrant" did 
not. The inventory work proceeded on that assumption, i.e., there 
were two data elements to be recorded in this example. 


Some other data elements, like "Remarks", "anniversary", and 
"Customer service Contact", are designed particularly for their own 
purpose by different registries. 

5.4. Conclusion 

5.4.1. Preliminary Statistics 


Some preliminary conclusions could be drawn from the raw data. 


o All of the 124 domain registries have the object names in their 
responses, although they are in various formats. 


o Of the 118 WHOIS services contacted, 65 registries show their 
registrant contact. About half of the registries (60 registries) 
support admin contact information. There are 47 registries, which 
is about one third of the total number, that have technical and 
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billing contact information. Only seven of the 124 registries 
give their abuse email in a "remarks" section. No explicit abuse 
contact information is provided. 


There are mainly two presentation formats. One is key-value; the 
other is data block format. Example of key-value format: 


Domain Information 

Query: nic.example.com 
Status: Delegated 

Created: 17 Apr 2004 
Modified: 14 Nov 2010 
Expires: 31 Dec 9999 

Name Servers: ns.example.net 
nsl.na.example.net 
ns2.na.example.net 


Example of data block format: 


WHOIS database 
domain nic.example.org 


a 


Domain Name nic.example.org 
Registered 1998-09-02 
Expiry 2012-09-02 


Resource Records 


198.51.100.1 


mx 10 test.example.net 
WWW a 198.51.100.10 


Contact details 


Registrant, 

Technical Contact, 

Billing Contact, 

Admin. Contact AdamsNames Reserved Domains (i) 
These domains are not available for registration 
United Kingdom 

Identifier: test123 


Zhou, 
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Servidor WHOIS de NIC-Example 


Este servidor contiene informacion autoritativa exclusivamente de 
dominios nic.example.org Cualquier consulta sobre este servicio, puede 
hacerla al correo electronico whois@nic.example.org 


Titular: 

John (nic.example.org) john@nic.example.org 

NIC Example 

Av. Veracruz con calle Cali, Edif Aguila, Urb. Las Mercedes 
Caracas, Distrito Capital VE 

0212-1234567 (FAX) -582123456789 


o 11 registries give local script responses. The WHOIS information 
of other registries are all represented in English. 


5.4.2. Data Element Analysis 


The top 10 data elements are listed in Table 14. 


4---------------------- 4------------- * 
| Data Element | No. of TLDs | 
4---------------------- 4------------- * 
| Domain Name | 118 | 
4---------------------- 4------------- * 
| Name Server | 114 | 
4---------------------- 4------------- * 
| Creation Date | 106 | 
4---------------------- 4------------- * 
| Domain Status | 95 | 
4---------------------- 4------------- * 
| Sponsoring Registrar | 84 | 
4---------------------- 4------------- * 
| Expiration Date | 81 | 
4---------------------- 4------------- * 
| Updated Date | 70 | 
4---------------------- 4------------- * 
| | Registrant Name | 65 

4---------------------- 4------------- * 
| Admin Street | 64 | 
4---------------------- 4------------- * 
| Admin Name | 60 | 
4---------------------- 4------------- * 


Table 14. The Top 10 Data Elements 
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Most of the domain-related WHOIS information is included in the top 
10 data elements. Other information like name server and registrar 
name is also supported by most registries. 


A cumulative distribution analysis of all the data elements was done. 


(1) About 5% of the data elements discovered by the inventory work 
are supported by 111 registries (i.e., 90%). 


(2) About 30% of the data elements discovered by the inventory work 
are supported by 44 registries (i.e., 35%). 


(3) About 60% of the data elements discovered by the inventory work 
are supported by 32 registries (i.e., 26%). 


(4) About 90% of the data elements discovered by the inventory work 
are supported by 14 registries (i.e., 11%). 


From the above result, it is clear that only a few registries support 


all the public objects, most of the registries support just some of 
the objects. 
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5.4.3. Label Analysis 


The top 10 labels of different data elements are listed in Table 15. 


4+------------------- R-—-------------- + 
| Labels | No. of Labels | 
4+------------------- $ + 
| Name Server | 63 | 
O E $ + 
| Creation Date | 24 | 
goessceceec.-esoes-—e R-——------------- + 
| Expiration Date | 21 | 
fa CoS Soe SSeS Hana + Soe sass + 
| Updated Date | 20 | 
4+------------------- geesccosscuneles + 
| Admin Street | 19 

4+------------------- $--------------- + 
| Tech ID | 18 | 
$ $ + 
| Registrant Street | 16 

HO $ + 
| Admin ID | 16 | 
E E Seees hnos pi e + 
| Tech Street | 16 | 
Da a orca haa cs a tra aa + 
| Billing Street | 13 

das ano Ha to + 


Table 15. The Top 10 Labels 


As explained above, the "Name Server" label is a unique example 
because many registries define the name server elements from 
"nameserver 1" through "nameserver n". Thus, the count of labels for 
name servers is much higher than other elements. Data elements 
representing dates and street addresses were also common. 


A cumulative distribution analysis of label numbers was done. About 
90$ of data elements have more than two labels. It is therefore 
necessary to specify a standard and unified format for object names 
in a WHOIS response. 


5.4.4. Analysis of Other Objects 
The results indicate that there are 392 other data objects in total 
that are not easy to be classified or are privately defined by 


various registries. The top 50 other objects are listed in Table 13 
in Section 5.3. It is clear that various different objects are 
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designed for some particular purpose. In order to ensure uniqueness 
of JSON names used in the RDAP service, establishment of an IANA 
registry is advised. 


5.5. Limitations 


This section lists the limitations of the survey and some assumptions 
that were made in the execution of this work. 


o The input "nic.ccTLD" may not be a good choice, for the term "nic" 
is often specially used by the corresponding ccTLD, so the 
collected WHOIS data may be customized and different from the 
common data. 


o Since the programming script queried the "nic.ccTLD" in an 
anonymous way, only the public WHOIS data from WHOIS servers 
having nic.ccTLD were collected. So, the private WHOIS data were 
not covered by this document. 

o 11 registries did not provide responses in English. The 
classification of data elements within their responses may not be 
accurate. 


o The extension data elements are used randomly by different 
registries. It is difficult to do statistical analysis. 


o Sample sizes of contact, name server, and registrar queries are 
small. 


* Only WHOIS queries for contact ID, nameserver, and registrar 
were used. 


* Some registries may not support contact, name server, or 
registrar queries. 


* Some may not support query contact by ID. 


* Contact information of some registries may be protected. 
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6. 


Reference Extension Objects 


There are some objects that are included in the existing WHOIS system 
but not mentioned in [RFC7483]. This document is intended to give a 
list of reference extension objects for discussion. 


6.1. 


6.2. 


RIR Reference Extension Objects 
company - the company name registered by the registrant. 


maintainer - authentication information that identifies who can 
modify the contents of this object. 


list of resources - a list of IPv4 addresses, IPv6 addresses, and 
Autonomous System numbers. 


referral NOC contact - the Network Operations Center contact. 


DNR Reference Extension Objects 


The following objects are selected from the top 50 other objects in 
Section 5.3 that are supported by more than five registries. These 
objects are considered as possible extension objects. 


o 


zone-c - The identifier of a 'role' object with authority over a 
zone. 


maintainer - authentication information that identifies who can 
modify the contents of this object. 


Registration URL - typically the website address of a registry. 


anonymous - whether the registration information is anonymous or 
not. 


hold - whether the domain is "on hold" or not. 
nsl-id - nameserver list ID. 
obsoleted - whether a domain is obsoleted or not. 


Customer Service Contact - a kind of contact. 


Security Considerations 


This document does not provide any security services or introduce 
additional considerations to those discussed in [RFC7481]. 
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